# US 12,182,300 B2 · Systems and methods for policy management

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 12,182,300 B2
- Document ID: US12182300B2
- Status: Granted
- Kind: B2
- Application number: 17/468,557
- Filed: 2021-09-07
- Published: 2023-03-09
- Granted: 2024-12-31
- Earliest claimed: 2021-09-07
- Assignees: Collibra Belgium BV
- Applicants: Collibra Belgium BV
- Inventors: Hafeesmon Chett; James B. Cushman, II
- Web page: https://patentgrep.com/patent/US12182300B2

## CPC

- G06F 21/6245: {Protecting personal data, e.g. for financial or medical purposes}
- G06F 21/6254: {by anonymising data, e.g. decorrelating personal data from the owner's identification}
- G06F 16/2272: {Management thereof}
- G06F 40/186: Templates
- G06F 40/42: Data-driven translation
- H04L 63/102: {Entity profiles}
- H04L 63/20: {for managing network security; network security policies in general (filtering policies H04L63/0227)}
- H04L 63/107: {wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals}
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)

## Abstract

Systems and methods for policy management are described. In some implementations, a master policy management system can create a policy template in which all policies of a user can be built, monitored, and enforced. The master policy management system can create a taxonomy for the policy template and receive access and control settings for the policy template from the user. A user can generate policies in the policy template and the master policy management system can review and certify the policies based the accuracy of the policies. Once a policy is built, the master policy management system can review and certify the policy, provide a quality score for the policy, perform lifecycle management, record the policy use, and report alerts regarding the policy.

## Claims

### Claim 1

A computing system comprising:
one or more processors; and
one or more memories storing instructions that, when executed by the one or more processors, cause the computing system to perform a process comprising:
creating a taxonomy for a policy template for generating and enforcing policies;
receiving user type access and control settings for the policy template;
attaching metadata tags to the policy template based on a type of data or description of an action in a user policy;
generating the policy template for receiving and enforcing policies;
generating a policy in the policy template in a first language of a client;
translating the policy into a second language of a policy management system for enforcement and certification of the policy, wherein the first language of the client is different from the second language of the policy management system; and
determining a quality score for the policy based on a combination of respective scores assigned to two or more of: a policy context, at least one policy rule or a policy revision status.

### Claim 2 (depends on 1)

The computing system of claim 1, wherein an enforcement ruleset defines data tagging and transformation for the policy.

### Claim 3 (depends on 1)

The computing system of claim 1, wherein the process further comprises:
scoring the policy based on policy use by a user during a time threshold.

### Claim 4 (depends on 1)

The computing system of claim 1, wherein the metadata tags indicate personally identifiable information.

### Claim 5 (depends on 1)

The computing system of claim 1, wherein the process further comprises:
monitoring the enforcement of the translated policy.

### Claim 6 (depends on 1)

The computing system of claim 1, wherein the process further comprises:
certifying the policy based on comparing the translated policy to policies in a master policy database.

### Claim 7 (depends on 1)

The computing system of claim 1, wherein the taxonomy is region specific.

### Claim 8

A method comprising:
creating a taxonomy for a policy template for generating and enforcing policies;
receiving user type access and control settings for the policy template;
attaching metadata tags to the policy template based on a type of data or description of an action in a user policy;
generating the policy template for receiving and enforcing policies;
generating a policy in the policy template in a first language of a client;
translating the policy into a second language of a policy management system for enforcement and certification of the policy, wherein the first language of the client is different from the second language of the policy management system; and
determining a quality score for the policy based on a combination of respective scores assigned to two or more of: a policy context, at least one policy rule, or a policy revision status.

### Claim 9 (depends on 8)

The method of claim 8, wherein an enforcement ruleset defines data tagging and transformation for the policy.

### Claim 10 (depends on 8)

The method of claim 8, further comprises:
scoring the policy based on policy use by a user during a time threshold.

### Claim 11 (depends on 8)

The method of claim 8, wherein the metadata tags indicate personally identifiable information.

### Claim 12 (depends on 8)

The method of claim 8, further comprises:
monitoring the enforcement of the translated policy.

### Claim 13 (depends on 8)

The method of claim 8, further comprises:
certifying the policy based on comparing the translated policy to policies in a master policy database.

### Claim 14 (depends on 8)

The method of claim 8, wherein the taxonomy is region specific.

### Claim 15

A non-transitory computer-readable storage medium including a set of instructions that, when executed by one or more processors, causes the one or more processors to perform operations comprising:
creating a taxonomy for a policy template for generating and enforcing policies;
receiving user type access and control settings for the policy template;
attaching metadata tags to the policy template based on a type of data or description of an action in a user policy;
generating the policy template for receiving and enforcing policies;
generating a policy in the policy template in a first language of a client;
translating the policy into a second language of a policy management system for enforcement and certification of the policy, wherein the first language of the client is different from the second language of the policy management system; and
determining a quality score for the policy based on a combination of respective scores assigned to two or more of: a policy context, at least one policy rule, or a policy revision status.

### Claim 16 (depends on 15)

The non-transitory computer-readable storage medium of claim 15, wherein an enforcement ruleset defines data tagging and transformation for the policy.

### Claim 17 (depends on 15)

The non-transitory computer-readable storage medium of claim 15, wherein the operations further comprise:
scoring the policy based on policy use by a user during a time threshold.

### Claim 18 (depends on 15)

The non-transitory computer-readable storage medium of claim 15, wherein the metadata tags indicate personally identifiable information.

### Claim 19 (depends on 15)

The non-transitory computer-readable storage medium of claim 15, wherein the operations further comprise:
monitoring the enforcement of the translated policy.

### Claim 20 (depends on 15)

The non-transitory computer-readable storage medium of claim 15, wherein the operations further comprise:
certifying the policy based on comparing the translated policy to policies in a master policy database.